I went for two whole weeks without comment spams, but now I'm hit by three of them in a day, all tacked onto the same post (this one, which is now closed), and with clear similarities in style (the URLs, for example, were in all caps in the emailed transcripts). I did the Sam Spade whois thing, and while I don't make a habit of pointing and laughing at a person's genitals I will make an exception this week for:
Registrant Name: Georgi Georgius
Registrant Street1: Simen 12
Registrant City: Styaua
Registrant State/Province: Styaua
Registrant Postal Code: 2321
Registrant Country: RO
Registrant Phone: 40.5298762
Registrant Email: pharm@bonishop.com
Mind you, I couldn't get full whois info on one of the domains he used, AMBIEN-SLEEPING-PILLS, tonight, but what I got is clear enough.
Full data for BUTALBITAL:
http://www.butalbital.org/ = [ 82.147.142.7 ]
Domain ID: D101590549-LROR
Domain Name: BUTALBITAL.ORG
Created On: 09-Oct-2003 13: 15: 44 UTC
Last Updated On: 09-Dec-2003 04: 20: 41 UTC
Expiration Date: 09-Oct-2004 13: 15: 44 UTC
Sponsoring Registrar: R91-LROR
Status: OK
Registrant ID: GODA-04349108
Registrant Name: Georgi Georgius
Registrant Street1: Simen 12
Registrant City: Styaua
Registrant State/Province: Styaua
Registrant Postal Code: 2321
Registrant Country: RO
Registrant Phone: 40.5298762
Registrant Email: pharm@bonishop.com
Admin ID: GODA-24349108
Admin Name: Georgi Georgius
Admin Street1: Simen 12
Admin City: Styaua
Admin State/Province: Styaua
Admin Postal Code: 2321
Admin Country: RO
Admin Phone: 40.5298762
Admin Email: pharm@bonishop.com
Tech ID: GODA-14349108
Tech Name: Georgi Georgius
Tech Street1: Simen 12
Tech City: Styaua
Tech State/Province: Styaua
Tech Postal Code: 2321
Tech Country: RO
Tech Phone: 40.5298762
Tech Email: pharm@bonishop.com
Name Server: CHICKEN.0RBITEL.NET
Name Server: NS.0RBITEL.NET
Truncated entry for AMBIEN-SLEEPING-PILLS:
http://www.ambien-sleeping-pills.net/ = [ 82.147.142.7 ]
Registrant:
Georgi Georgius
Registered through: GoDaddy.com
Domain Name: AMBIEN-SLEEPING-PILLS.NET
Domain servers in listed order:
NS.0RBITEL.NET
CHICKEN.0RBITEL.NET
For complete domain details go to:
Note same registrant, same IP address and same name servers in both.
Comments (1)
And note goDaddy :-)
Posted by Daani | May 13, 2004 8:06 AM
Posted on May 13, 2004 08:06